Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
eba2bfae1a9a589b9d02550a4eb1a8fe_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eba2bfae1a9a589b9d02550a4eb1a8fe_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
eba2bfae1a9a589b9d02550a4eb1a8fe_JaffaCakes118
Size
121KB
MD5
eba2bfae1a9a589b9d02550a4eb1a8fe
SHA1
95583ea020b3e047fddce6cfbd219270cce657e3
SHA256
20f01a1498e2a56776630bd9da9f0e8540dd229d259e47954472b3ed8e392042
SHA512
8fb8806d9943042eb75f7c37c0e2a5360e4879313ab68927c1283a48d5edb74822c353093d69e715703acee740f69419b8ce8ff0cb170183a337c16dffe852c9
SSDEEP
1536:48eyl089XmngDiwQQpFDUIYkK4cEui1gNNx0eW6QPB/4ZW1ck8zHhTduu+qjIk9j:xI89XmngDNQQHhYZ4z1sxtbjIUWnoRzf
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
G:\CXR24\BSF\win_b64\code\bin\chcatenv.pdb
??1CATSysEnvManager@@QEAA@XZ
?Insert@CATUnicodeString@@QEAAXHAEBV1@@Z
?BuildFromNum@CATUnicodeString@@QEAAHHPEBD@Z
?Write@CATSysLog@@SAXVCATUnicodeString@@@Z
?Write@CATSysLog@@SAXPEBD@Z
?Write@CATSysEnvManager@@QEAA?AW4ReturnCode@1@PEAVCATSysEnv@@H@Z
?RemoveAllIncludes@CATSysEnv@@QEAA?AW4ReturnCode@1@XZ
?PutEnv@CATSysEnv@@QEAAXVCATUnicodeString@@0W4Options@1@W4CVCType@CATVarCouple@@0@Z
?Append@CATUnicodeString@@QEAAAEAV1@AEBV1@@Z
?ReplaceSubString@CATUnicodeString@@QEAAHAEBV1@0@Z
??HCATUnicodeString@@QEBA?AV0@AEBV0@@Z
??8CATUnicodeChar@@QEBAHAEBV0@@Z
??ACATUnicodeString@@QEBA?AVCATUnicodeChar@@_K@Z
??1CATUnicodeChar@@QEAA@XZ
??0CATUnicodeString@@QEAA@AEBVCATUnicodeChar@@_K@Z
??0CATUnicodeChar@@QEAA@D@Z
?Remove@CATUnicodeString@@QEAAXHH@Z
?GetEnv@CATSysEnv@@QEAAPEBDPEBD@Z
??BCATUnicodeString@@QEBAPEBDXZ
?GetVariableType@CATVarCouple@@QEAA?AW4CVCType@1@XZ
?GetComment@CATVarCouple@@QEAA?AVCATUnicodeString@@XZ
?GetValue@CATVarCouple@@QEAAPEBDXZ
?GetEnvVar@CATSysEnv@@QEAAPEAVCATVarCouple@@PEBD@Z
?SearchSubString@CATUnicodeString@@QEBAHAEBV1@HW4CATSearchMode@1@@Z
??4CATUnicodeString@@QEAAAEAV0@AEBV0@@Z
??9CATUnicodeString@@QEBAHPEBD@Z
?DelEnv@CATSysEnv@@QEAA?AW4ReturnCode@1@VCATUnicodeString@@@Z
?GetEnvMode@CATSysEnv@@QEAA?AW4Mode@1@XZ
?Read@CATSysEnvManager@@QEAA?AW4ReturnCode@1@VCATUnicodeString@@W4Mode@CATSysEnv@@AEAPEAV5@W4Value@5@@Z
?CheckIfFileExists@CATSysEnvManager@@QEAA?AW4ReturnCode@1@VCATUnicodeString@@0W4Mode@CATSysEnv@@@Z
CATFileAccess
?SetCATEnvDirectory@CATSysEnvManager@@QEAA?AW4ReturnCode@1@W4Mode@CATSysEnv@@VCATUnicodeString@@@Z
??0CATUnicodeString@@QEAA@AEBV0@@Z
?GetCATEnvDirectory@CATSysEnvManager@@QEAA?AW4ReturnCode@1@W4Mode@CATSysEnv@@AEAVCATUnicodeString@@@Z
??1CATToken@@UEAA@XZ
?IsAnOfficialVariable@CATSysEnvManager@@QEAA?AW4ReturnCode@1@PEBD@Z
?GetNextToken@CATToken@@QEAA?AVCATUnicodeString@@AEBV2@@Z
??0CATToken@@QEAA@AEBVCATUnicodeString@@@Z
??0CATSysEnvManager@@QEAA@XZ
?IsSystemAdmin@CATAdmMainEnv@@QEAA?BW4Status@1@XZ
?GetLengthInByte@CATUnicodeString@@QEBAHXZ
??1CATAdmMainEnv@@QEAA@XZ
?ConvertToChar@CATUnicodeString@@QEBAPEBDXZ
??1CATUnicodeString@@QEAA@XZ
??1CATString@@QEAA@XZ
?BuildMessage@CATMsgCatalog@@SA?BVCATUnicodeString@@AEBVCATString@@0PEAV2@HAEBV2@@Z
??0CATString@@QEAA@QEBD@Z
??0CATUnicodeString@@QEAA@QEBD@Z
??0CATAdmMainEnv@@QEAA@XZ
?SetLogFileName@CATSysLog@@SAPEBDPEBD@Z
??4CATUnicodeString@@QEAAAEAV0@PEBD@Z
??0CATUnicodeString@@QEAA@XZ
??0CATString@@QEAA@XZ
??1CATAdmOpt@@QEAA@XZ
?GetUnknownOpt@CATAdmOpt@@QEAA?AVCATUnicodeString@@XZ
?IsOtherOpt@CATAdmOpt@@QEAA?BW4Answer@1@W4AllOpt@1@@Z
?IsCommand@CATAdmOpt@@QEAA?BW4Answer@1@W4Command@1@@Z
?IsCommand@CATAdmOpt@@QEAA?BW4Answer@1@W4CommandYesNo@1@@Z
?IsCommand@CATAdmOpt@@QEAA?BW4Answer2@1@W4Command2@1@@Z
?GetVarOption@CATAdmOpt@@QEAAPEAVCATUnicodeString@@XZ
?GetOption@CATAdmOpt@@QEAAPEBDW4Option@1@@Z
??0CATAdmOpt@@QEAA@XZ
_encode_pointer
_lock
_onexit
_decode_pointer
_amsg_exit
__dllonexit
_XcptFilter
_exit
_cexit
exit
__initenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
?terminate@@YAXXZ
_unlock
__C_specific_handler
printf
__iob_func
fflush
??2@YAPEAX_K@Z
??3@YAXPEAX@Z
__getmainargs
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ